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[57] ABSTRACT 

A method for accessing a selected group of data which is 
stored on a machine readable storage medium, which 
method includes: assigning a first identifying designation to 
the storage medium; assigning a second identifying desig- 
nation to a machine which can read the storage medium; 
assigning a third identifying designation to the selected 
group of data; obtaining an access code which is a function 
of the first, second and third identifying designations; input- 
ting the access code into the machine; and processing the 
access code in the machine for receiving the third identify- 
ing designation. 

A data processing system including: a data storage medium 
storing a plurality of groups of data and a machine readable 
first identifying designation which identifies the storage 
medium; and a machine composed of components for read- 
ing the storage medium, storing a machine readable second 
identifying designation which identifies the machine, input- 
ting a code uniquely associated with the first and second 
identifying designations and with at least one selected group 
of stored data, and accessing data stored on the storage 
medium in response to inputting of the code. 

11 Claims, 2 Drawing Sheets 
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METHOD AND SYSTEM FOR itself is small, the data on the CD ROM is very difficult and 

DISSEMINATING STORED PROGRAMS AND expensive to acquire and thus there are high royalties 

DATA associated with the use of such databases. Because of this 

fact, databases are generally sold in small units called 

BACKGROUND OF THE INVENTION 5 "metropolitan areas" in much the same way that map books 

. . . . are sold. For example, one metro area could include the 

The present invention relates to the dissemination of greater New York metropolitan area while another could 

stored programs and data collections for use in data pro- include the Washington, DC metropolitan area, 

cessing systems. Because of the large storage capacity on a CD ROM, one 

Commercial dissemination of programs and databases is 1Q disc could hold a number of metropolitan areas. This would 

generally effected by fixing them on a storage medium, such be beneficial because it would cost less and would make it 

as a diskette or CD ROM, packaging the storage medium more convenient for the user to have fewer discs to have to 

together with documentation and placing the resulting pack- manage. However, if more than one metro area is placed on 

ages on sale at retail outlets. The price of the package will the disc, a way must be found to "sell" specific databases on 

depend essentially on the costs incurred in generating the the d&c to the user and to allow the user access to these 

programs or the databases, the cost of producing the storage databases while preventing the use of other databases for 

medium being, in relative terms, inconsequential. which he has not paid. If ( at a later time, the user wants to 

There is a clear trend toward storage media having ever jcuvate other databases on the disc, a way must be provided 

larger capacities. For example, a CD ROM can store many for him to do so. 

times more data than a computer diskette. Therefore, many ^ ^ invention utilizes an identifying designation, such as 
programs, or sets of programs, or databases can be stored on a scrial number, assigned to the navigator hardware and an 
a single CD ROM and to do so could create significant identifying designation assigned to the CD ROM, in con- 
economies in connection with packaging and distribution junction with a designation of the specific data collection 
and would reduce the number of media which an individual which & is desired to use to secure an access code, or pass 
must acquire. However, the primary obstacle to such an 25 code ' 0110(5 that access 00(16 fa known, it is utilized in the 
approach would be the price that must be charged for such ^vice in combination with the hardware and CD ROM 
CD ROM in order to recover the expenses involved in identifying designations to unlock the appropriate CD ROM 

generating all of the programs or databases on that medium. ^ les - 

In the case of a navigator, each individual machine 

SUMMARY OF THE INVENTION ^ contains a non-volatile memory in which is permanently 

It is an object of the present invention to simplify and a unique serial number for that machine. This serial 

facilitate the distribution of programs and databases fixed on number is stored in a manner to enable it to be read within 

large capacity storage media. ^ machine. This serial number, or a counterpart alpha- 

i « . - j» . . . „ . numeric designation, is also provided at a visible location on 

Another object of the invention is to allow consumers to f , ^ . . ' ~ f /\ i,^^.. ... „ rtW ^ e 

. , J c ^_ . ^_ *.iisj the machine or as part or the documentation which comes 

purchase only a portion of the proprietary material fixed on 35 ^^^^ 

a storage radium. For user convenience, the machine will also be packaged 

Yet another object of the invention is to prevent unautho- ^ QQe OT more ^ R0Ms containing the software for 

nzed access to any material on such a storage medium. operatillg mc Mvigator md Mp for ^ or somC) 

Yet another object of the invention is to render pirating" or some of the geographic areas for which the manufacturer 

(unauthorized cloning of the CD ROMs) unprofitable. w has obtained the necessary map data. Assuming that all of 

Yet another object of the invention is to enable the the map data available to the manufacturer can be placed on 

purchaser of a storage medium to obtain access to different a reasonable number of CD ROMs, storage of all of that data 

materials on the medium as needed. on a set of CD ROMs would greatly simplify production and 

Hie above and other objects are achieved, according to ^ distribution of the CD ROMs. It will be appreciated that 

the present invention, by a method and system for accessing actual fabrication of a CD ROM is relatively inexpensive, 

a selected group of data which is stored on a machine Each CD ROM carries an identifying designation which is 

readable storage medium, comprising: assigning a first iden- specific to its contents. This designation is stored on the CD 

tifying designation the storage medium; assigning a second ROM in machine readable form and is provided on a visible 

identifying designation to a machine which can read the ^ label on the CD ROM. 

storage medium; assigning a third identifying designation to The material included in the product package would also 

the selected group of data; obtaining an access code, or pass include a listing providing an identif ying designation for 

code, which is a function of the first, second and third each group of data, or map database, 

identifying designations; and inputting the access code into When a user wants to obtain access to a particular 

the machine to enable the machine to perform an inverse 55 database or databases, he would contact, for example via 

process in order to access the selected group of data on the telephone, the manufacturer, or a service which acts on 

storage medium. behalf of the manufacturer, and would provide, either by 

The invention will be described herebelow with reference voice or by operation of a telephone keypad, the machine or 

to computer controlled navigation systems of the type which hardware serial number, the CD ROM designation code and 

can be installed in an automotive vehicle or carried by a go the designation of each database to be accessed. A suitable 

pedestrian. system would be established to allow the user to pay the 

Automobile navigation systems require access to large necessary fee for obtaining the desired database or data- 
digitized map databases covering large geographic areas. bases. Hie manufacturer or service would then provide an 
One efficient way to provide navigation systems with such access code which is based on a combination of the items of 
databases is to place the digitized ma p databases on CD 65 information provided by the user. 

ROMs which may be read by the navigation computer via a According to a particular novel feature of the invention, 

CD ROM player. Although file cost of the plastic CD ROM the access code would be generated from pseudorandom 
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encryptions of the information supplied by the user. lech- In preferred embodiments of the invention, generation of 

niques for achieving this result will be described subse- the access code is based on pseudorandom operations. This 

quently herein. could involve combining the three numerical values in any 

The user would then input the access code into his predetermined maiinCT, ackiing 

machine, where it would be combined with the machine 5 number and taking selected digits of the respective sum 

identification number and the CD ROM identification According to another possibility, selected digits of each of 

number, according to an inverse pseudorandom function to the three numerical values are combined with a pseudoran- 

generate an output which unlocks the designated databases domly generated number. According to other possibilities, 

on the CD ROM. &U or some of the digits of the three numerical values could 

10 be combined according to a function represented by a 

BRIEF DESCRIPTION OF THE DRAWING pseudorandom number. 

FIG. 1 is a simplified pictorial view of a system according According to preferred embodiments of the invention, the 

to the present invention. pseudorandom operations involve substituting pseudoran- 

FIGS. 2, 3 and 4 are pictorial views of various operations domly generated numbers for individual or combined 

performed to implement the invention. 15 numerical values. 

DESCRIPTION OF THE PREFERRED TMmiques for encryption by the use of pseudorandom 

EMBODIMENTS numbers are quite well known in the art and any such 

technique may be utilized in the practice of the present 

A complete system according to the invention can be invention, 

considered to include, as shown in FIG. 1, a navigator 2, a 20 ^ resulting acoess code ^ men conveyed to the user, via 

communication device 4, which may be a conventional communication device 4. The user can then input that 

telephone, and a central station 6 where an automated number via input device 10 and it will be processed, in 

encryption system or a human operator using a suitable decryption unit 16, with the rnachine ID number, which will 

encryption computer can communicate with the communi- be read from memory 15, and the ROM ID, which wfll be 

cation device via a telephone line. & read from CD ROM 18. The decryption unit 16 generates 

Navigator 2 is composed basically of an input device 10, pseudorandom numbers that are appropriately related to that 

a CD ROM drive 12, a CPU 14, a non-volatile memory, IS, generated in device 26, and processes the access code 

containing the hardware serial number and a decryption inputted via input device 10, the machine ID and the CD 

program in a unit 16. Navigator 2 will be associated with one ROM ID with internally generated pseudorandom numbers 

or more CD ROMs 18. 30 to generate address information for the group of data which 

Navigator 2 may basically be constructed as disclosed in is to be made available to the user. This information is 

U.S. Pat No. 5,274,560, which issued to Charles LaRue on delivered to drive 12 in order to allow readout of that data. 

Dec. 28, 1993. While the navigator will typically have other The use of pseudorandom numbers to both generate and 

components, those illustrated in FIG. 1 are the components 3J decode the access code serves to greatly reduce the likeli- 

required to implement the present invention. hood of obtaining unauthorized access to any data stored on 

Input device 10 may be constructed to receive any type of a CD ROM. The security of this arrangement is further 

input. For example, input device 10 may be a keyboard to enhanced by the fact that the access code is a function of not 

receive a manual input or a microphone and speech recog- only the ROM ID, but also the machine ID. This means that 

nizcr to receive a voice input ^ even if an access code were obtained with respect to one 

Navigator 2 has an identifying designation (machine ID), machine, it would not be operative if an attempt were made 

which may be unique to mat particular machine, litis to use the same CD ROM in a different machine, even if the 

designation appears in legible form on the outside of the first and second machines are identical models. In this case, 

navigator and is also stored in memory 15. Each CD ROM also, the use of pseudorandom numbers to both generate and 

18 has a respective identifying designation, which appears in 45 decrypt the access code assures that one cannot derive an 

legible form on a label area (ROM ID) and which is also access code for a different machine of the same model 

stored in machine readable form on the CD ROM. A ROM simply by noting the differences between the machine IDs of 

ID is unique to a particular CD ROM edition, or version. the two machines. 

Thus, all CD ROMs made from the same master will have When a user wishes to obtain access to additional groups 

the same ROM ID. jp of data on a CD ROM, the new access code, for which the 

When a user wishes to gain access to, or unlock, a user will make appropriate payment, will be operative to 

particular group of data, which will typically be composed permit access to both the new collections of data as well as 

of a plurality of files, the user contacts central station 6 via the collections of data for which the customer previously 

a telephone line from communication device 4. After estab- paid. 

lishing contact, either with a human operator or a voice 55 The performance of a pseudorandom operation on an 

operated system, the user transmits, by speaking or keying identifying designation will be referred to hereinafter as 

in the machine ID, the ROM ID and a designation of the randomizing. One example of this procedure is the follow- 

desired group of data. For this purpose, the user will be ing. 

provided with a listing of the groups of data available on the a table of pseudorandom numbers, the range of which 

CD ROM and the designation assigned to each such group. ^ does not exceed the length of the tables and which does not 

Alternatively, a label on the CD ROM would designate include any repetitions, can be created using known pro- 

the available databases. grams. For example, the C-compiler, which is commercially 

In the central station 6, this information is conducted from available public domain software, includes a program called 

a data transceiver to an encryption computer 26 which "Random" which will generate a pseudorandom series of 

generates an access code which is a function of the three 65 numbers. Each entry of the table would include an address 

items of information which had been transmitted from corresponding to an identifying designation value and a 

communication device 4. pseudarandomly generated number stored at that address as 
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data. Of course, each pesudGrandom number can have any cation number assigned to the CD ROM is subjected to a 

number of bits. Since the same pseudorandom number first randomizing process in which it is converted into, or 

generating program, ox programs, are stored in encryption replaced by, a first pseudorandomly generated number. The 

unit 26 of central station 6 and in decryption unit 16 in same operation is performed on the second identifying 

navigator 2, the same pseudorandom tables can be generated s designation 102 representing the machine serial number to 

at both locations. form a second pseudorandomly generated number. The two 

After the table has been generated, the identifying pseudorandomly generated numbers are then added together 

designation, or selected digits of that designation, will serve to form a value ID_JSN. This sum is then added to a bit map 

as the address from which the generated pseudorandom number 103 (BM) which constitutes the third identifying 

number is read. 10 designation identifying one or more selected groups of data. 

The same table, or another generated table, can be used to The new sum ID_SN_JBM is subjected to a randomizing 

randomize an intermediate value produced during the process to produce a third pseudorandom number which is 

encryption operation. used to produce an upper group of digits 105 of the resulting 

Recovery of a number which has been thus randomized access code, or pass code, 
will be referred to herein as unrandomizing. This can be 15 The above process is repeated, possibly with different 
achieved, according to the present invention, by searching randomizing functions, to produce the lower digits 106 of 
the appropriate table of pseudorandom numbers to locate the the pass code. In the example illustrated, the same random- 
table entry in which the pseudorandom number is stored as iring functions are used. Finally, to complete the pass code, 
data. The address of that entry is then read out as the the original first identifying designation is prefixed to the 
unrandomized number. 20 pass code to make the pass code specific to the particular CD 

To avoid the need for a very large memory to store the ROM identification number, 

pseudorandom number tables, the size of such tables should The resulting pass code is then transmitted back to the 

be limited This can be done by appropriate "folding" of long user. 

numbers and/or by using a division process, or **modulus Referring now to FIG. 3, a process for accessing the 

operation". For example, if it is desired to limit a number to desired group or groups of data stored on the CD ROM 

a range of between 0 and 999, and the numbers originally involves performing on the CD ROM identifying designa- 

cover a larger range, each number can be divided by a given tion 101 and the machine identifying designation 102 the 

value, for example 1000, yielding an integer and a remain- same randomizing operations as those performed during 

der. The remainder would always fall within the desired encryption, resulting in generation of the data value ID__SN. 

range and would be used as the actual number. For example, The upper digits 105 of the inputted pass code are unran- 

if the original number is 10404, division of that number by domized to recreate ID__SNJM, from which K>_SN is 

1000 would yield a remainder of 404. subtracted to yield BM. 

On the CD ROM, a plurality of groups of data, or According to a further feature of the invention, proper 

databases, are stored. Each database may contain road map 35 receipt of the pass code can be verified in the machine by 

data for a given geographical area. A directory on the CD regenerating the lower order digits 106 of the pass code and 

ROM can be in the form of a bit map having a mimber of bits comparing that with the lower order digits received from 

equal to the number of databases. Each bit position will be central station 6. This procedure is illustrated in FIG. 4 

associated with a particular database. Each database that can where the disk identifying designation 101 and the machine 

be accessed will be represented by a binary "1" at the ^ identifying designation 102 are each subjected to the same 

associated bit map location. For example, if the first, third pseudorandom conversion or conversions as those per- 

and tenth databases, representing different geographic areas, formed to generate the lower order digits in the procedure 

are to be accessed, or enabled, the bits at locations 0, 2 and described with reference to FIG. 2. The resulting numbers 

9 of the bit map would be set to a value of Assuming are added to create the value ID_JSN, which is added to the 

that the bit at location 0 is the lowest order bit (2°), the 45 third identifying designation to form ID JNJM. This 

decimal value represented by this bit map would be: 2°+2 2 + number is men randomized by the same pseudorandom 

2 =517. conversion as that performed in the procedure described 

The length of a pass code will represent a compromise with reference to FIG. 2 and the resulting number is com- 

between competing considerations. Specifically, the longer pared with the received lower order digits 106. A successful 

the pass code, the lower the likelihood that one can arrive at 50 comparison indicates that the pass code has been properly 

the correct pass code in an unauthorized manner. On the received. 

other hand, a shorter pass code will make the system more After the bit map has been extracted, it can be stored in 

convenient for the user. memory 15 (FIG. 1) and can be used by CPU 14 to directly 

It will be noted that achievement of the results contem- address the CD ROM during subsequent uses of the navi- 

plated by the present invention does not depend primarily on 55 gator. 

the number of digits in the pass code or even in the manner While the description above refers to particular embodi- 

in which the parts of the pass code are randomized. Rather, meats of the present invention, it will be understood that 

it is based on the use of a built-in hardware serial number, many modifications may be made without departing from 

a disk ID and a bit map to generate the pass code and the use the spirit thereof. The accompanying claims are intended to 

of the same hardware serial number and disk ID, along with & cover such modifications as would fall within the true scope 

the generated pass code, to retrieve the bit map. and spirit of the present invention. 

Preferably, the pass code is supplied to the user in decimal The presently disclosed enibodiments are therefore to be 

form and the necessary dedrnal-binary conversion will be considered in all respects as illustrative and not restrictive, 

performed in the navigator. the scope of the invention being indicated by the appended 

An example of one embodiment of an encryption scheme 65 claims, rather than the foregoing description, and all changes 

according to the present invention is shown in FIG. 2. The which come within the meaning and range of equivalency of 

first identifying designation 101, representing the identifl- the claims are therefore intended to be embraced therein. 
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What is claimed: 

1. A method for accessing a selected group of data which 
is stored on a machine readable storage medium, compris- 
ing: 

assigning a first identifying designation to the storage 
medium; 

assigning a second identifying designation to a machine 

which can read the storage medium; 
assigning a third identifying designation to the selected 

group of data; 
obtaining an access code which is a function of the first, 

second and third identifying designations; 
inputting the access code into the machine; and 
processing the access code in the machine for generating 

the third identifying designation. 

2. A method as defined in claim 1 wherein the second 
identifying designation is unique to the machine. 

3. A method as defined in claim 1 wherein the third 
identifying designation is unique to the selected group of 20 
data. 

4. A method as defined in claim 1 further comprising 
storing the first identifying designation in a machine read- 
able form in the machine, and wherein said step of process- 
ing includes processing the access code as a function of the 
first identifying designation. 

5. A method as defined in claim 1 wherein said step of 
processing includes deriving the third identifying designa- 
tion as a function of the first and second identifying desig- 
nations and the access code. 

6. A method as defined in claim 1 wherein said step of 
obtaining an access code comprises: transmitting the first, 
second and third identifying designations to a central facility 
via a telephone link; at the central facility processing the 
identifying designations to derive the access code; and 



25 



30 



transmitting the derived access code from the central facility 
via the telephone link. 

7. A method as defined in claim 1 wherein said step of 
obtaining an access code comprises modifying at least one 
of the first and second identifying designations according to 
a pseudorandom function. 

8. A method as defined in claim 7 further comprising 
storing the first identifying designation in the machine and 
said step of processing the access code comprises again 
performing said modifying step. 

9. A data processing system comprising: 

a data storage medium storing a plurality of groups of data 
and a machine readable first identifying designation 
which identifies the storage medium; 

a machine including: means for reading the storage 
medium, means storing a machine readable second 
identifying designation which identifies the machine, 
input means and a control unit connected for accessing 
data stored on said storage medium in response to 
inputting, via said input means, of a code uniquely 
associated with the first and second identifying desig- 
nations and with at least one selected group of stored 
data. 

10. A system as defined in claim 9 wherein the code 
contains a pseudorandomly generated number associated 
with a combination of the identifying designations and the at 
least one selected group of stared data, said control unit 
comprises decryption means for processing the pseudoran- 
domly generated number to derive an identification of the at 
least one selected group of data, 

11. A system as defined in claim 9 constituting a navigator 
for producing travel routing directions. 
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